This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a51c1625-7ad3-4857-abf5-0d2a9449a726.roa
File: a51c1625-7ad3-4857-abf5-0d2a9449a726.roa (raw, json)
Hash identifier: as2k1+1KnOAzWLykLy6xMf/iBeTBD5f6TqWUeSdEylo=
Subject key identifier: 1E:E5:A6:CF:CF:B4:B5:1B:92:EA:7E:AF:B4:9E:48:A6:62:7B:83:03
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1AD1B7A29C652211C865A66ACE534D2546AEF65C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a51c1625-7ad3-4857-abf5-0d2a9449a726.roa
Signing time: Tue 25 Nov 2025 11:02:11 +0000
ROA not before: Tue 25 Nov 2025 11:02:11 +0000
ROA not after: Mon 23 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1dd0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d1:b7:a2:9c:65:22:11:c8:65:a6:6a:ce:53:4d:25:46:ae:f6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Nov 25 11:02:11 2025 GMT
Not After : Feb 23 23:59:59 2026 GMT
Subject: serialNumber=26a39a086d5e631690db74b7220f016cd5148b382ca0d096ab8e825a0821ff98, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:ab:2e:8f:bb:21:d1:28:93:05:7b:d1:91:
54:df:33:6a:b1:38:22:07:cd:17:e8:e2:76:b9:e2:
5f:01:5a:95:77:06:f3:23:2d:53:b5:b9:ff:14:62:
9e:62:e9:fc:70:98:7f:37:8b:06:23:df:36:5a:d3:
08:3b:e5:b0:bc:4e:cd:4d:fd:6e:d2:40:e8:ae:20:
2a:31:d3:38:ba:2a:b3:ed:cb:c5:ea:6d:c5:ee:a8:
29:7a:b9:6e:fe:23:07:ea:4b:6b:2f:8b:52:27:3e:
c9:c7:e1:03:7c:20:65:16:52:52:03:fa:a7:18:ee:
09:57:0e:8f:83:03:61:af:43:5b:b1:b4:7c:dd:12:
72:b1:1e:0d:68:01:fb:ad:85:6c:6d:57:95:f3:42:
6e:48:ea:1d:c9:9f:ae:5a:f6:f6:ab:95:bb:be:67:
0b:28:f6:55:b3:8d:be:30:e1:13:af:17:58:f9:a4:
c7:a3:82:c9:3d:bd:26:77:91:57:7f:03:24:d1:bb:
77:b4:08:17:77:7b:60:50:59:06:17:63:54:cf:2a:
37:10:fc:14:9c:5b:a3:15:72:eb:76:be:3f:8b:ea:
67:a6:11:ac:fe:45:18:49:45:99:e0:eb:aa:34:4e:
0d:77:1d:5e:b5:43:10:e0:e9:f6:75:5c:33:c2:47:
db:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:A6:CF:CF:B4:B5:1B:92:EA:7E:AF:B4:9E:48:A6:62:7B:83:03
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a51c1625-7ad3-4857-abf5-0d2a9449a726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1dd0::/45
Signature Algorithm: sha256WithRSAEncryption
ae:07:f9:aa:25:a3:e2:db:68:0b:b8:67:04:a1:36:d3:e2:d8:
98:69:a9:0f:0b:53:d7:f0:c1:7f:00:90:73:2b:d6:28:1d:78:
07:7c:93:c5:bb:c9:af:34:a7:33:39:6e:80:f1:ad:df:0c:5e:
da:e0:8f:b6:b2:c7:84:02:4a:e7:2d:2d:54:63:2a:27:a9:bb:
4b:9c:de:6b:3e:43:fa:be:9e:d8:91:2d:40:82:4a:ec:5a:23:
10:cc:c1:e4:f6:cb:d7:5a:b0:03:02:bc:61:ca:f6:9b:40:09:
3b:50:f7:7e:dc:39:f1:9d:e9:0f:e9:fe:f9:43:87:04:c4:c3:
67:a1:11:c4:f4:cf:4b:0d:07:59:17:51:7f:db:64:3a:f9:39:
65:0c:56:bd:0e:90:b0:c9:59:d2:58:ef:bb:eb:1f:12:5b:2f:
7c:f4:9f:d6:4e:51:96:74:b1:dd:36:71:c0:9d:a6:b1:fd:9a:
95:34:39:1d:37:51:f7:74:46:84:ab:3f:e4:29:db:74:7a:8f:
bc:e0:c9:40:97:f6:6b:cc:42:6c:f7:3b:aa:48:db:cd:f4:d1:
9a:a4:ee:ab:a5:e1:2a:16:a7:2e:77:be:2d:e3:09:c4:13:e7:
73:5d:64:d9:2c:de:dc:a2:c7:56:31:95:fc:49:70:58:f4:71:
ea:0f:9d:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:07:39 2025 by rpki-client